Join the discussion
Question 1/135
For a Microsoft cloud environment, you are designing a security architecture based on the Microsoft Cybersecurity Reference Architectures (MCRA). You need to protect against the following external threats of an attack chain:
* An attacker attempts to exfiltrate data to external websites.
* An attacker attempts lateral movement across domain-joined computers.
What should you include in the recommendation for each threat? To answer, select the appropriate options in the answer area.

* An attacker attempts to exfiltrate data to external websites.
* An attacker attempts lateral movement across domain-joined computers.
What should you include in the recommendation for each threat? To answer, select the appropriate options in the answer area.

Correct Answer:

Add Comments
- Other Question (135q)
- Q1. For a Microsoft cloud environment, you are designing a security architecture based on the ...
- Q2. You have a Microsoft 365 subscription You need to recommend a security solution to monitor...
- Q3. A customer follows the Zero Trust model and explicitly verifies each attempt to access its...
- Q4. You need to recommend a solution to evaluate regulatory compliance across the entire manag...
- Q5. You are evaluating an Azure environment for compliance. You need to design an Azure Policy...
- Q6. Your company uses Microsoft Defender for Cloud and Microsoft Sentinel. The company is desi...
- Q7. Your company has a hybrid cloud infrastructure. Data and applications are moved regularly ...
- Q8. For a Microsoft cloud environment, you are designing a security architecture based on the ...
- Q9. Your company is developing a serverless application in Azure that will have the architectu...
- Q10. You are designing an auditing solution for Azure landing zones that will contain the follo...
- Q11. You are designing security for a runbook in an Azure Automation account. The runbook will ...
- Q12. Your company has Microsoft 365 E5 licenses and Azure subscriptions. The company plans to a...
- Q13. You are creating an application lifecycle management process based on the Microsoft Securi...
- Q14. You have a Microsoft 365 subscription and an Azure subscription. Microsoft 365 Defender an...
- Q15. A customer is deploying Docker images to 10 Azure Kubernetes Service (AKS) resources acros...
- Q16. A customer uses Azure to develop a mobile app that will be consumed by external users as s...
- Q17. You have a Microsoft 365 subscription that is protected by using Microsoft 365 Defender Yo...
- Q18. Your company uses Microsoft Defender for Cloud and Microsoft Sentinel. The company is desi...
- Q19. You have a Microsoft 365 E5 subscription and an Azure subscripts You need to evaluate the ...
- Q20. You are creating the security recommendations for an Azure App Service web app named App1....
- Q21. You open Microsoft Defender for Cloud as shown in the following exhibit. (Exhibit) Use the...
- Q22. Your company uses Microsoft Defender for Cloud and Microsoft Sentinel. The company is desi...
- Q23. You plan to deploy a dynamically scaling, Linux-based Azure Virtual Machine Scale Set that...
- Q24. You have an Azure subscription that has Microsoft Defender for Cloud enabled. You are eval...
- Q25. You need to recommend a solution to secure the MedicalHistory data in the ClaimsDetail tab...
- Q26. You have a Microsoft 365 E5 subscription and an Azure subscripts You need to evaluate the ...
- Q27. Your company has a multi-cloud environment that contains a Microsoft 365 subscription, an ...
- Q28. Your company is migrating data to Azure. The data contains Personally Identifiable Informa...
- Q29. Your network contains an on-premises Active Directory Domain Services (AO DS) domain. The ...
- Q30. Your company has a hybrid cloud infrastructure. The company plans to hire several temporar...
- Q31. You have a Microsoft 365 subscription and an Azure subscription. Microsoft 365 Defender an...
- Q32. You have a Microsoft 365 subscription You need to recommend a security solution to monitor...
- Q33. You are designing security for an Azure landing zone. Your company identifies the followin...
- Q34. Your company has a multi-cloud environment that contains a Microsoft 365 subscription, an ...
- Q35. Your company has a Microsoft 365 subscription and uses Microsoft Defender for Identity. Yo...
- Q36. Your company has a Microsoft 365 E5 subscription. The company plans to deploy 45 mobile se...
- Q37. Your company is preparing for cloud adoption. You are designing security for Azure landing...
- Q38. You need to recommend a multi-tenant and hybrid security solution that meets to the busine...
- Q39. Your company is developing an invoicing application that will use Azure Active Directory (...
- Q40. You need to recommend a solution to meet the compliance requirements. What should you reco...
- Q41. You use Azure Pipelines with Azure Repos to implement continuous integration and continuou...
- Q42. You have a Microsoft 365 subscription You need to recommend a security solution to monitor...
- Q43. You have a Microsoft 365 subscription and an Azure subscription. Microsoft 365 Defender an...
- Q44. Your company uses Microsoft Defender for Cloud and Microsoft Sentinel. The company is desi...
- Q45. Your company has a Microsoft 365 E5 subscription, an Azure subscription, on-premises appli...
- Q46. Your company has a Microsoft 365 E5 subscription. The Chief Compliance Officer plans to en...
- Q47. You have a Microsoft 365 subscription You need to recommend a security solution to monitor...
- Q48. You have a hybrid Azure AD tenant that has pass-through authentication enabled. You are de...
- Q49. Your company has Microsoft 365 E5 licenses and Azure subscriptions. The company plans to a...
- Q50. Your company wants to optimize ransomware incident investigations. You need to recommend a...
- Q51. A customer has a hybrid cloud infrastructure that contains a Microsoft 365 E5 subscription...
- Q52. You need to recommend a multi-tenant and hybrid security solution that meets to the busine...
- Q53. Your company plans to move all on-premises virtual machines to Azure. A network engineer p...
- Q54. You have a Microsoft 365 subscription You need to recommend a security solution to monitor...
- Q55. You have an Azure subscription that has Microsoft Defender for Cloud enabled. You have an ...
- Q56. You have a Microsoft 365 E5 subscription. You are designing a solution to protect confiden...
- Q57. You are designing a security operations strategy based on the Zero Trust framework. You ne...
- Q58. You need to recommend a solution to meet the AWS requirements. What should you include in ...
- Q59. You open Microsoft Defender for Cloud as shown in the following exhibit. (Exhibit) Use the...
- Q60. Your company has a multi-cloud environment that contains a Microsoft 365 subscription, an ...
- Q61. Your company has a Microsoft 365 subscription and uses Microsoft Defender for Identity. Yo...
- Q62. Your on-premises network contains an e-commerce web app that was developed in Angular and ...
- Q63. Your company develops several applications that are accessed as custom enterprise applicat...
- Q64. Your company plans to provision blob storage by using an Azure Storage account The blob st...
- Q65. A customer has a Microsoft 365 E5 subscription and an Azure subscription. The customer wan...
- Q66. Your company has a Microsoft 365 E5 subscription, an Azure subscription, on-premises appli...
- Q67. You need to recommend a strategy for App Service web app connectivity. The solution must m...
- Q68. You design cloud-based software as a service (SaaS) solutions. You need to recommend ranso...
- Q69. Your company wants to optimize using Microsoft Defender for Endpoint to protect its resour...
- Q70. You are evaluating the security of ClaimsApp. For each of the following statements, select...
- Q71. Your company plans to deploy several Azure App Service web apps. The web apps will be depl...
- Q72. A customer has a hybrid cloud infrastructure that contains a Microsoft 365 E5 subscription...
- Q73. Your company is developing a modern application that will run as an Azure App Service web ...
- Q74. Your company has Microsoft 365 E5 licenses and Azure subscriptions. The company plans to a...
- Q75. You have a hybrid cloud infrastructure. You plan to deploy the Azure applications shown in...
- Q76. You are designing an auditing solution for Azure landing zones that will contain the follo...
- Q77. You need to recommend a strategy for securing the litware.com forest. The solution must me...
- Q78. Your company has an Azure App Service plan that is used to deploy containerized web apps. ...
- Q79. Your company uses Microsoft Defender for Cloud and Microsoft Sentinel. The company is desi...
- Q80. You have a Microsoft 365 tenant. Your company uses a third-party software as a service (Sa...
- Q81. You need to recommend an identity security solution for the Azure AD tenant of Litware. Th...
- Q82. Your company is designing an application architecture for Azure App Service Environment (A...
- Q83. You have a Microsoft 365 subscription and an Azure subscription. Microsoft 365 Defender an...
- Q84. A customer is deploying Docker images to 10 Azure Kubernetes Service (AKS) resources acros...
- Q85. You have a Microsoft 365 subscription You need to recommend a security solution to monitor...
- Q86. You need to recommend a solution to meet the requirements for connections to ClaimsDB. Wha...
- Q87. Your company is migrating data to Azure. The data contains Personally Identifiable Informa...
- Q88. You are evaluating the security of ClaimsApp. For each of the following statements, select...
- Q89. You need to recommend a solution to meet the requirements for connections to ClaimsDB. Wha...
- Q90. You need to recommend a solution to secure the MedicalHistory data in the ClaimsDetail tab...
- Q91. Your on-premises network contains an e-commerce web app that was developed in Angular and ...
- Q92. Your company is designing an application architecture for Azure App Service Environment (A...
- Q93. You need to recommend a solution to resolve the virtual machine issue. What should you inc...
- Q94. You are designing security for a runbook in an Azure Automation account. The runbook will ...
- Q95. Your company is developing an invoicing application that will use Azure Active Directory (...
- Q96. Your company has a Microsoft 365 subscription and uses Microsoft Defender for Identity. Yo...
- Q97. Your company has the virtual machine infrastructure shown in the following table. (Exhibit...
- Q98. You have a Microsoft 365 subscription that syncs with Active Directory Domain Services (AD...
- Q99. You need to recommend a strategy for App Service web app connectivity. The solution must m...
- Q100. You are designing the encryption standards for data at rest for an Azure resource You need...
- Q101. Your company has a Microsoft 365 E5 subscription, an Azure subscription, on-premises appli...
- Q102. You have a Microsoft 365 E5 subscription. You are designing a solution to protect confiden...
- Q103. You have an Azure subscription that contains several storage accounts. The storage account...
- Q104. You need to recommend a multi-tenant and hybrid security solution that meets to the busine...
- Q105. You are designing a security strategy for providing access to Azure App Service web apps t...
- Q106. You use Azure Pipelines with Azure Repos to implement continuous integration and continuou...
- Q107. Your company has Microsoft 365 E5 licenses and Azure subscriptions. The company plans to a...
- Q108. You are designing security for a runbook in an Azure Automation account. The runbook will ...
- Q109. You have a Microsoft 365 E5 subscription and an Azure subscripts You need to evaluate the ...
- Q110. Your company wants to optimize using Azure to protect its resources from ransomware. You n...
- Q111. For a Microsoft cloud environment, you are designing a security architecture based on the ...
- Q112. You need to recommend a strategy for routing internet-bound traffic from the landing zones...
- Q113. You need to recommend a SIEM and SOAR strategy that meets the hybrid requirements, the Mic...
- Q114. Your company has an on-premise network in Seattle and an Azure subscription. The on-premis...
- Q115. You have a Microsoft 365 subscription that is protected by using Microsoft 365 Defender Yo...
- Q116. Note: This question is part of a series of questions that present the same scenario. Each ...
- Q117. You have a Microsoft 365 subscription that is protected by using Microsoft 365 Defender Yo...
- Q118. You need to recommend a strategy for securing the litware.com forest. The solution must me...
- Q119. Your company wants to optimize using Azure to protect its resources from ransomware. You n...
- Q120. You are designing an auditing solution for Azure landing zones that will contain the follo...
- Q121. You need to recommend a solution to evaluate regulatory compliance across the entire manag...
- Q122. You have an Azure AD tenant that syncs with an Active Directory Domain Services {AD DS) do...
- Q123. Your company uses Microsoft Defender for Cloud and Microsoft Sentinel. The company is desi...
- Q124. You need to recommend a strategy for securing the litware.com forest. The solution must me...
- Q125. You receive a security alert in Microsoft Defender for Cloud as shown in the exhibit. (Cli...
- Q126. You need to recommend a strategy for securing the litware.com forest. The solution must me...
- Q127. Your company finalizes the adoption of Azure and is implementing Microsoft Defender for Cl...
- Q128. You have a Microsoft 365 subscription and an Azure subscription. Microsoft 365 Defender an...
- Q129. You have a Microsoft 365 subscription and an Azure subscription. Microsoft 365 Defender an...
- Q130. You have a Microsoft 365 E5 subscription and an Azure subscripts You need to evaluate the ...
- Q131. You need to recommend a solution to meet the AWS requirements. What should you include in ...
- Q132. A customer uses Azure to develop a mobile app that will be consumed by external users as s...
- Q133. You need to recommend a strategy for App Service web app connectivity. The solution must m...
- Q134. You need to recommend a solution to evaluate regulatory compliance across the entire manag...
- Q135. You have a hybrid cloud infrastructure. You plan to deploy the Azure applications shown in...
